This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/krfc0WNLUx6hJvboRiV5gk-WnVc.roa File: krfc0WNLUx6hJvboRiV5gk-WnVc.roa (raw, json) Hash identifier: K3F7v7vct+kdtxcJdeS+2oWlYV9pZORsvbv2DJKsK9Q= Subject key identifier: 92:B7:DC:D1:63:4B:53:1E:A1:26:F6:E8:46:25:79:82:4F:96:9D:57 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731C816C52A1772DDA33B519B0EB8B6E Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/krfc0WNLUx6hJvboRiV5gk-WnVc.roa Signing time: Tue 11 Nov 2025 13:30:39 +0000 ROA not before: Tue 11 Nov 2025 13:30:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215330 IP address blocks: 2a0b:7a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1c:81:6c:52:a1:77:2d:da:33:b5:19:b0:eb:8b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:30:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92b7dcd1634b531ea126f6e8462579824f969d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:fc:3e:00:a5:30:6f:30:2c:a2:02:54:ef: a3:e4:8a:fc:6f:51:02:ae:4f:e1:0c:74:fc:e8:ad: bd:7d:70:15:95:15:5f:56:09:15:42:50:54:60:82: 9c:cc:aa:c3:50:81:d2:84:52:f5:18:67:ba:c1:78: 0e:26:72:83:93:c9:c6:a0:80:e5:15:a3:c8:4d:da: 8f:1e:d5:73:57:b5:3d:b0:67:72:52:e7:cc:ad:fc: f1:ea:6c:5b:b3:f5:3f:a8:5c:4f:5f:a1:94:b0:7c: 03:7b:29:72:84:d1:f8:af:0e:1e:ea:44:94:25:4e: f7:b1:b6:ef:15:50:ae:30:04:b8:b8:97:2c:a4:3e: 26:a9:bb:10:bd:f6:5b:fd:57:83:d1:d5:97:59:b3: c6:d3:c1:b9:fc:23:0f:39:4d:58:b3:79:4b:16:80: bf:7d:87:80:20:85:97:57:99:ef:61:02:84:08:63: ca:00:50:47:a0:93:a1:7a:75:3f:7d:55:b1:e2:54: 1c:91:59:17:f2:1f:52:a1:67:71:13:7d:f0:5c:a4: 81:bf:59:f9:85:2c:67:09:f1:df:32:5d:72:c2:2a: ab:14:1c:2a:fb:51:b1:00:11:16:14:db:78:a9:5b: ae:27:37:bc:61:05:3b:a9:8b:da:6d:cf:d8:8f:08: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:DC:D1:63:4B:53:1E:A1:26:F6:E8:46:25:79:82:4F:96:9D:57 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/krfc0WNLUx6hJvboRiV5gk-WnVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7a80::/29 Signature Algorithm: sha256WithRSAEncryption 20:4b:ed:e6:4e:3b:22:58:d0:41:b0:2e:f2:86:87:0d:dc:55: c7:c0:6e:a9:cf:97:2d:f5:e3:12:8d:2f:63:eb:b9:ce:62:aa: 85:53:6a:83:6c:e1:8b:cb:3c:7d:f5:f5:96:43:84:a7:45:dd: 8e:3b:3e:32:f6:54:42:96:06:0f:ad:5a:5b:74:b4:93:8a:fd: 1f:00:b5:d8:fa:a8:bc:2b:92:08:dc:dd:1f:46:66:b0:4f:75: d4:37:ec:bd:7c:4a:a4:be:49:21:e8:f6:80:7c:74:6c:be:bd: 98:76:87:9d:67:b6:f0:60:dc:22:12:c7:14:d1:46:50:40:00: 1f:96:e3:a9:3f:cd:89:e8:9e:39:e3:d4:49:8a:2f:75:4e:b2: c8:36:41:6f:fd:b9:26:97:cb:69:4c:b1:f7:8f:fc:49:70:19: 18:b4:60:85:1a:ec:aa:18:00:ad:d8:85:ca:da:ed:ac:c3:97: f7:ff:92:28:bf:5d:b0:1b:e9:0a:15:11:66:b8:32:00:d9:01: e9:80:0c:d1:f7:d4:7b:7f:81:27:db:d5:19:96:95:b5:4b:49: 0c:50:24:e3:48:c7:7a:6a:57:30:f9:28:d7:f6:ca:f7:78:cc: a5:6d:a0:cf:51:5a:57:89:6e:e7:79:d3:7e:2c:d7:75:f5:b5: d4:fe:23:57 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHIFsUqF3LdoztRmw64tuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmI3ZGNkMTYzNGI1MzFlYTEyNmY2ZTg0NjI1Nzk4MjRmOTY5ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ar8PgClMG8wLKICVO+j5Ir8b1EC rk/hDHT86K29fXAVlRVfVgkVQlBUYIKczKrDUIHShFL1GGe6wXgOJnKDk8nGoIDl FaPITdqPHtVzV7U9sGdyUufMrfzx6mxbs/U/qFxPX6GUsHwDeylyhNH4rw4e6kSU JU73sbbvFVCuMAS4uJcspD4mqbsQvfZb/VeD0dWXWbPG08G5/CMPOU1Ys3lLFoC/ fYeAIIWXV5nvYQKECGPKAFBHoJOhenU/fVWx4lQckVkX8h9SoWdxE33wXKSBv1n5 hSxnCfHfMl1ywiqrFBwq+1GxABEWFNt4qVuuJze8YQU7qYvabc/Yjwhy1wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJK33NFjS1MeoSb26EYleYJPlp1XMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEva3JmYzBXTkxVeDZoSnZib1JpVjVnay1XblZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgt6gDAN BgkqhkiG9w0BAQsFAAOCAQEAIEvt5k47IljQQbAu8oaHDdxVx8Buqc+XLfXjEo0v Y+u5zmKqhVNqg2zhi8s8ffX1lkOEp0Xdjjs+MvZUQpYGD61aW3S0k4r9HwC12Pqo vCuSCNzdH0ZmsE911DfsvXxKpL5JIej2gHx0bL69mHaHnWe28GDcIhLHFNFGUEAA H5bjqT/NieieOePUSYovdU6yyDZBb/25JpfLaUyx94/8SXAZGLRghRrsqhgArdiF ytrtrMOX9/+SKL9dsBvpChURZrgyANkB6YAM0ffUe3+BJ9vVGZaVtUtJDFAk40jH empXMPko1/bK93jMpW2gz1FaV4lu53nTfizXdfW11P4jVw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:35 2025 by rpki-client